--- parser: v2 auto_validation: true time: 20 tags: [tutorial>beginner, topic>machine-learning, topic>artificial-intelligence, topic>cloud, software-product>sap-business-technology-platform, software-product>sap-ai-services, software-product>sap-document-ai, tutorial>license] primary_tag: topic>machine-learning author_name: Juliana Morais author_profile: https://github.com/Juliana-Morais slug: cp-aibus-doc-ai-workspace canonical_url: https://developers.sap.com/tutorials/cp-aibus-doc-ai-workspace --- # Get Access to the SAP Document AI Workspace Use either the embedded edition plan or the premium edition plan to get access to the SAP Document AI workspace, using an enterprise account in the SAP Business Technology Platform (SAP BTP). ## Prerequisites - You have created a service instance for SAP Document AI using either the embedded edition (embedded_edition) plan or the premium edition (premium_edition) plan (instead of the free plan): [Use Free Tier to Create a Service Instance for SAP Document AI](cp-aibus-dox-free-service-instance) ## You will learn - How to get a tenant for Cloud Identity Services - How to activate an account for Cloud Identity Services and establish trust - How to subscribe, assign authorization policies and access the SAP Document AI workspace --- ### Access the SAP BTP cockpit After completing the prerequisite tutorial [Use Free Tier to Create a Service Instance for SAP Document AI](cp-aibus-dox-free-service-instance), you can start with the steps to subscribe to the SAP Document AI workspace. For now, the SAP Document AI workspace is only available for enterprise accounts with the plans embedded edition (embedded_edition) and premium edition (premium_edition). Make sure to choose one of these 2 plans when creating your service instance (instead of the free plan). For more information, see [Service Plans](https://help.sap.com/docs/document-ai/sap-document-ai/service-plans). 1. Open the [SAP BTP cockpit](https://cockpit.btp.cloud.sap). 2. Click the tile to access your subaccount. ![Access Subaccount](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/access-subaccount.png) ### Check your entitlements To use the SAP Document AI workspace, you need to make sure that your account is properly configured. The SAP Document AI workspace requires a tenant for Cloud Identity Services. For more information, see [Get Your Tenant](https://help.sap.com/docs/cloud-identity-services/cloud-identity-services/get-your-tenant?version=Cloud). 1. On the navigation side bar, click **Entitlements** to see a list of all eligible services. You're entitled to use every service in this list according to the assigned service plan. 2. Search for `Cloud Identity Services`. ***If you find it in the list, you're entitled to use it. Now you can set this step to **Done** and proceed with Step 3.*** ![Check Entitlements](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/check-entitlements.png) ***ONLY if you DO NOT find `Cloud Identity Services` in your list, proceed as follows:*** 1. Click **Edit**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/edit.png) 2. Click **Add Service Plans**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/add-service-plans.png) 3. Search for `Cloud Identity Services`. Choose the `default (Application)` plan (or the `additional-tenant (Application)` plan). Click **Add 1 Service Plan**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/add-plan.png) 4. Click **Save** to save your entitlement changes. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/save-entitlements.png) You're now entitled to create a tenant for Cloud Identity Services. ### Get your tenant for Cloud Identity Services The Service Marketplace is where you find all the services and applications available on SAP BTP. 1. On the navigation side bar, click **Service Marketplace**. Search for `Cloud Identity Services` and click the tile. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/tile-ias.png) 2. In the top-right corner, click **Create**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/subscribe-ias.png) 3. In the dialog, click **Create**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/dialog-create-ias.png) The subscription is going to be created now. Click on **View Subscription** to go to the list of your existing subscriptions. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/dialog-in-progress.png) ### Activate your account for Cloud Identity Services 1. Go to your inbox and open the account activation email (`Activation Information for SAP Cloud Identity Services`). Click the activation link. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/activate-account.png) 2. Enter a password and click **Continue**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/activate-account-continue.png) 3. You're informed that your account is successfully activated. Click **Continue**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/activate-account-activated.png) This opens the administration console of SAP Cloud Identity Services: ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/console.png) Leave the administration console of SAP Cloud Identity Services open. We'll go back here in step 7. ### Establish trust 1. Back on the SAP BTP cockpit, under **Security**, click **Trust Configuration** and then in the top-right corner, click **Establish Trust**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/trust.png) 2. Choose your tenant for Cloud Identity Services and click **Next** 3 times. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/next.png) 3. Click **Finish**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/finish.png) Your tenant for Cloud Identity Services is added to the list: ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/list.png) ### Get subscribed to the SAP Document AI workspace Before subscribing to the SAP Document AI workspace, make sure that a service instance has alread been created for SAP Document AI using either the embedded edition (embedded_edition) plan or the premium edition (premium_edition) plan. 1. On the navigation side bar, click **Service Marketplace**. Search for `SAP Document AI` and click the tile. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/tile.png) 2. Click **Create**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/subscribe.png) 3. In the dialog, choose the `default` plan and click **Create**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/dialog-create.png) The subscription is going to be created now. Click on **View Subscription** to go to the list of your existing subscriptions. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/dialog-in-progress.png) ### Assign authorization policies SAP Document AI provides default policies that you can assign to users. These policies determine which actions a user can carry out on the SAP Document AI workspace. For more information, see [Authorization Policies](https://help.sap.com/docs/document-ai/sap-document-ai/authorization-policies-workspace). 1. Go back to the administration console of SAP Cloud Identity Services that you left open in step 4. 2. Under **Applications & Resources**, choose the **Applications** tile. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/applications.png) 3. Choose the bundled application `SAP Document AI`. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/bundled-application.png) 4. Choose the **Authorization Policies** tab and choose an authorization policy that you want to assign – for example, `Admin`. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/authorization-policies.png) The administration console opens the **Assignments** pane. 5. Choose **Add**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/add.png) 6. Select the users that you want to add to the authorization policy and choose **Add**. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/add-users.png) You have added the selected users to an authorization policy. These users are authorized to access and use the resources with the rules and restrictions defined in the authorization policy. ### Go to application 1. Back on the SAP BTP cockpit, under **Services**, click **Instances and Subscriptions**. Choose the three dots at the right end of the row with the SAP Document AI application and select **Go to Application** from the dropdown. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/go-to-app.png) The logon screen appears. 2. Enter your Identity Authentication service *Email or User Name* and *Password* to log on. A **Permission Denied** dialog is displayed. Or the SAP Document AI basic UI appears (in case you've already used the same subaccount to access the SAP Document AI basic UI as described in [Use Free Tier to Subscribe to SAP Document AI Basic UI](cp-aibus-dox-free-ui-sub)). To access the SAP Document AI workspace, do the following: - On the **Permission Denied** dialog, do the following: Choose the link (`here`) in β€œOr choose `here` if you already have access to the SAP Document AI workspace.” ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/denied.png) - From the SAP Document AI basic UI, toggle the **Workspace** switch at the top of the screen from **OFF** to **ON**. Alternatively, edit the URL of the SAP Document AI basic UI, replacing /ui and everything that follows it with /workspace. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/basic.png) The SAP Document AI workspace appears. ![DOX-UI](https://raw.githubusercontent.com/sap-tutorials/Tutorials/master/tutorials/cp-aibus-doc-ai-workspace/app.png) You have successfully subscribed to the SAP Document AI workspace.